35.90.224.185📋 Copy

# IP Intelligence Briefing: 35.90.224.185/32

## Executive Summary

The IP address 35.90.224.185 is a low-risk infrastructure endpoint associated with Amazon Web Services. The address shows minimal threat indicators, no active malicious services, and stable AWS cloud infrastructure characteristics. No immediate defensive action required beyond standard monitoring.

---

## Infrastructure Profile

Ownership & Network Classification:

• Organization: Amazon.com, Inc.
• ASN: 16509 (AMAZON-02)
• CIDR Block: 35.80.0.0/12
• Region: us-west-2 (Oregon)
• Location: Boardman, OR, United States

Network Role:

• Provider: Amazon Web Services
• Infrastructure Type: Cloud EC2 Instance
• Connection Type: Unknown
• Cloud Hosted: Yes

DNS Resolution:

• PTR Hostname: ec2-35-90-224-185.us-west-2.compute.amazonaws.com
• Forward Resolution: Confirmed
• Domain: amazonaws.com
• DNSSEC: Valid

---

## Threat Assessment

Risk Score: 25 (Low Risk)

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Abuse Confidence: Not applicable

Threat Indicators:

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0 (current scan)
• Threat Feeds: None identified
• Known Campaigns: None

Control Plane Data:

• Origin ASN: 16509
• BGP Prefix: 35.80.0.0/12
• RPKI State: Not evaluated
• Route Stability: Not stable
• DNSBL Listed: 1 of 8 lists (likely false positive for AWS infrastructure)

---

## Service Exposure Analysis

Open Ports: None detected

TLS Certificate: Not present

HTTP Service: Not responding

Server Banner: None

Certificates: None

The IP shows no active service exposure, which is consistent with AWS infrastructure that may be firewalled or used for internal traffic.

---

## Historical Observation Timeline

Total Observations: 14

Recent observations (2026-08-06) indicate:

• DNSSEC validation: Valid
• SPF Record: Present (v=spf1 include:amazon.com ~all)
• DMARC Record: Present (p=quarantine)
• TXT Records: 5 records found
• Blacklist Listings: 8 total lists, 1 active listing
• ASN Resolution: Amazon.com, Inc., US

The history shows consistent AWS infrastructure behavior with proper email authentication records in place.

---

## Relationship Graph

Connected Entities (3 total):

1. Same Network: AMAZON-ZPDX (network classification)

2. DNS Association: ec2-35-90-224-185.us-west-2.compute.amazonaws.com

3. Same Network: AMAZON-ZPDX (network classification)

No external organization or certificate associations detected.

---

## Neighborhood Analysis

Subnet: 35.90.224.185/24

• Neighbor Count: 0
• Risk Distribution: 0 high, 0 medium, 0 low
• Abuse Density: 0%
• Threat Siblings: 0

The /24 subnet shows no neighboring threat activity, indicating isolated infrastructure usage.

---

## Recommended Actions

Risk Score: 25

• Provider: Amazon Web Services
• Recommended Actions: None
• Firewall Rules: Not applicable

SOC Analyst Guidance:

1. Classification: Treat as legitimate AWS infrastructure

2. Monitoring: Standard log monitoring only; no blocking required

3. Allow-listing: Consider for whitelisting if traffic originates from expected AWS services

4. Threat Hunting: No specific indicators of compromise present

---

## Intelligence Confidence

Confidence Level: High

• Multiple data sources confirm AWS infrastructure
• No contradictory threat signals detected
• Historical data shows consistent benign behavior
• DNSSEC and email authentication properly configured

Last Updated: 2026-08-06

Data Sources: IPDebrief intelligence platform

---

## Conclusion

IP 35.90.224.185 represents standard AWS cloud infrastructure with no malicious indicators. The low-risk profile, lack of open services, and proper infrastructure classification support continued monitoring without defensive intervention.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.